General

  • Target

    3950bdfba15a80588712f93b70a36cbf4f596157bbe462f0e311d77b80192594

  • Size

    67KB

  • MD5

    49cd518e8cb5a3c843b904bae224ef4d

  • SHA1

    035301621d06e3b0e69b26a937aa5a560aac2f97

  • SHA256

    3950bdfba15a80588712f93b70a36cbf4f596157bbe462f0e311d77b80192594

  • SHA512

    429d9fb9670a094d5a708a2def67103384fc104990223eeb65d6a3676fcf068d917c804d908ef32252baf6f6e7fa367725de3dbeae00e8317648329547b17ee4

  • SSDEEP

    1536:hnkuSQTaBse/yP+jRKquRyZ0InIYVzwDbOXuW63mV:hnhS4GEsRfusZDIYhGr3mV

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 3950bdfba15a80588712f93b70a36cbf4f596157bbe462f0e311d77b80192594
    .dll windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows x86


    Headers

    Sections